ThreatModeler Nexus is a platform for secure design and governed threat modeling across applications, cloud and hybrid architectures, devices, and operational technology. Its Secure Design Graph links architecture, threats, controls, compliance requirements, and security decisions in a connected system of record. System Mapping, Graph, and Reporting agents operate on that graph. The platform supports STRIDE, PASTA, and CSA MAESTRO for agentic systems, and maps findings to more than 180 security and regulatory frameworks, including NIST, ISO 27001, PCI DSS, HIPAA, DORA, and the EU AI Act. A built-in MCP Server checks pull requests and commits against a current threat model and returns threats, requirements, and mitigations in developer workflows. Integrations include infrastructure tools, cloud providers, development platforms, ServiceNow, and ArmorCode. Customers can connect their own AI model, with a deterministic framework governing output. The Secure Design Graph contains more than 1,500 catalogued threats and 3,500 security requirements. A free Community Edition is listed; the ThreatModeler license costs 4000.00 USD per year on a 12-month contract, and additional AWS infrastructure costs may apply. Pricing is also available on request.
Who it is for
ThreatModeler Nexus is aimed at enterprise security, architecture, development, compliance, and risk teams managing large portfolios. It may suit teams that need threat modeling connected to developer workflows and compliance frameworks.
What is good
- Maps findings to more than 180 frameworks
- Supports STRIDE, PASTA, and CSA MAESTRO
- MCP Server checks pull requests and commits against threat models
- Customers can connect their own AI model
- Lists ISO 27001:2022 and SOC 2 Type II certifications
What to know first
- ThreatModeler license costs 4000.00 USD per year
- Additional AWS infrastructure costs may apply
- Support applies only to the current and preceding major versions
Verdict
ThreatModeler Nexus connects threat modeling with architecture, compliance, and development workflows, with options for web, API, and self-hosted environments. The listed license has an annual contract, and deployment may also involve AWS infrastructure costs.
ThreatModeler Nexus plans and pricing
All plansCompared on threat modeling software
- Free plan
- Yes
- Attack-path analysis
- Yes
- Risk prioritization
- Yes
- Templates and frameworks
- Yes
- Modeling methods
- multiple
- Deployment
- both
